Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File:                     kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier:          tzNKGkniMfxdCQyDsBNUIO51YrQEfSXPJJAnljxBXyM=
Subject key identifier:   F7:27:BE:CB:E5:F0:04:CC:A7:E8:3B:22:5A:9C:A8:3C:E6:FA:CC:A2
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer:       /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial:       01962F06C689025A64BC5A59E94616D4C6E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number:          08DE
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: REM4mLJG7EnsBgBtsv162D0wKhg.roa (hash: lvlcTJIeXHpqeTqGfZTwiMwS8+bWAY5YDqELcR5epC0=)
                          2: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (hash: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=)
                          3: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (hash: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=)
                          4: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (hash: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=)
                          5: bXzPu6L2HXchD9ZujQmLXPM_bDM.roa (hash: KqR406WMI/nRws1aNrGcGP+z2vKLl1H8bxnYaFt2+LA=)
                          6: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: 9DwMFrSQksVFlC/0EU3ONRKM1mF+2GS8ioK17C+mzLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:89:02:5a:64:bc:5a:59:e9:46:16:d4:c6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=f727becbe5f004cca7e83b225a9ca83ce6facca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:f9:a1:e8:09:82:fc:7b:68:26:2b:65:cd:
                    5f:96:73:0b:6c:b4:db:e0:fa:12:62:c5:0b:6b:ad:
                    f8:c5:17:b6:ab:fa:df:92:5b:a8:15:34:6f:83:59:
                    79:13:a8:a6:a4:ef:43:cf:20:0f:96:55:bc:50:69:
                    21:7a:de:db:c2:26:8c:e7:f4:d0:24:5c:3e:4d:c3:
                    0a:87:89:1c:e9:d2:83:47:a0:91:3a:d9:c4:d2:03:
                    a2:1a:81:cd:4c:b1:9a:6d:83:75:e4:15:9d:e3:08:
                    51:1a:f2:ca:36:85:8a:33:d3:10:f3:eb:0f:a7:ba:
                    53:99:be:c0:a3:1b:62:77:9c:88:93:c3:36:cb:63:
                    bc:b9:36:28:0f:1e:26:55:62:0a:54:af:81:3c:7a:
                    da:c9:22:f9:8f:3a:65:8f:dc:06:10:d5:49:47:83:
                    91:68:ad:3a:0a:d6:0d:6f:82:9c:97:6b:ad:fe:51:
                    b5:65:98:ee:3c:9c:f7:16:df:dc:92:a1:45:8e:20:
                    d3:67:5a:55:88:48:a4:0c:4a:05:0e:1a:96:b9:84:
                    df:e5:2a:de:d0:da:5f:48:4f:ec:7b:96:0f:d2:de:
                    49:1f:1f:97:3e:01:33:90:25:5a:91:2d:0e:2b:31:
                    dd:33:fa:51:89:d3:59:ce:52:58:fe:5f:a8:f0:6a:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:BE:CB:E5:F0:04:CC:A7:E8:3B:22:5A:9C:A8:3C:E6:FA:CC:A2
            X509v3 Authority Key Identifier:
                keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f5:79:10:7f:70:00:af:d1:bb:77:26:69:3a:de:df:4b:b8:
         25:d0:e5:5b:e3:06:3b:9a:ab:bc:dc:28:59:1b:85:bf:4c:d1:
         11:c6:8e:7b:5d:22:fd:06:42:f6:73:72:da:14:ab:8e:1d:29:
         51:c4:c4:a4:f6:26:eb:23:fe:be:c4:fd:74:82:d1:03:c6:7a:
         2e:83:b9:22:6e:f7:e9:b7:f3:6e:4a:32:c9:29:ab:5b:d8:17:
         88:13:d2:b6:2a:17:0b:0e:ee:41:d5:e2:39:ac:6a:12:66:9a:
         f2:cc:a2:6d:11:3a:a8:62:88:b7:f8:58:e7:a7:a6:02:93:1d:
         d9:0c:d5:ad:d6:b7:37:a5:fb:86:1b:d6:8b:95:52:d5:41:38:
         c5:49:7c:15:84:e3:7e:01:ff:f4:19:6c:2a:c6:9b:4b:b3:f7:
         14:6e:a7:e2:5a:38:85:8f:d0:b7:85:43:e3:26:e8:30:7c:bd:
         36:ad:84:50:49:fa:9d:55:ec:d9:3e:3b:07:ef:c8:2c:fc:ed:
         89:c7:83:fd:3a:79:9b:59:19:72:c4:88:f7:fd:94:01:5d:6b:
         5d:3c:5d:02:44:9c:b0:56:30:71:98:e1:61:a4:17:00:e7:d9:
         79:48:51:5e:87:94:91:6a:b8:23:6e:66:a8:41:10:5f:a6:9b:
         dd:fc:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----